Beruflich Dokumente
Kultur Dokumente
In This Document
Overview page 1
Before You Begin page 2
Supported Versions for Upgrade page 2
pv1_license_upgrade page 2
license_upgrade page 3
Provider-1 License Upgrade Flow for an MDS Server with Internet Connection page 4
License Upgrade for a Single CMA page 10
Overview
It is highly recommended to upgrade all Provider-1/SiteManager-1 NG licenses to NGX
R62 licenses before upgrading software. Provider-1/SiteManager-1 NGX R62 with
licenses from previous versions will not function.
Licenses for versions prior to NG cannot be upgraded directly to NGX R62. In such a
case, you must first upgrade to NG and then upgrade the licenses from NG to NGX R62
licenses.
This document will describe the steps required for upgrading Provider-1/SiteManager-1
licenses to NGX R62, as part of the software Upgrade procedure.
1
Before You Begin
In the Accounts page, Enterprise Contract column, and in the Products page,
Subscription and Support column, if the account or product is covered, the expiration
date is shown. Otherwise, the entry says Join Now, with a link that accesses a quote for
purchasing Enterprise Support.
You can purchase an Enterprise Software Subscription for the whole account, in which
case all the products in the account will be covered, or you can purchase an Enterprise
Software Subscription for individual products.
pv1_license_upgrade
The pv1_license_upgrade command line tool is used to perform license upgrade for
Provider-1.
When the tool is run on the MDS, upgraded licenses are obtained from the Check Point
User Center Web site for the MDS and for all the CMAs on the MDS. This tool makes it
simple to automatically upgrade licenses without having to do so manually through the
User Center.
The pv1_license_upgrade tool is located in:
• Provider-1 NGX R62 CD at: <platform>/LicenseUpgrade/
• NGX R62 installation at: /opt/CPmds-R62/system/license_upgrade/
It is recommended that you check
http://www.checkpoint.com/techsupport/ngx/license_upgrade.html for up to date
information and downloads regarding the NGX R62 license upgrade.
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 2
license_upgrade
license_upgrade
The license_upgrade command line tool is used to perform license upgrade for a single
CMA. This is the same tool as that used to perform a license upgrade in SmartCenter
environments.
The license_upgrade tool is located in:
• Provider-1 NGX R62 CD at: <platform>/LicenseUpgrade/
• NGX R62 installation at: /opt/CPmds-R62/system/license_upgrade/
It is recommended that you check
http://www.checkpoint.com/techsupport/ngx/license_upgrade.html for up to date
information and downloads regarding the NGX R62 license upgrade.
Running the licence_upgrade command line tool displays a menu with a number of
options. To see all the options, run: license_upgrade.
Option Definition
[L] View the licenses installed on your machine.
[S] Sends existing licenses to the User Center Web site to simulate the license
upgrade in order to verify that it can be performed. A real upgrade is not
performed and new licenses are not returned.
[U] Sends existing licenses to the User Center Web site to perform an upgrade (by
default, in online mode) and installs them on the machine.
[C] Reports whether or not there are licenses on the machine that need to be
upgraded.
[O] Performs a license upgrade on a license file that was generated on a machine
with no Internet access to the User Center.
[V] Enables you to view a log of the last license upgrade or the last upgrade
simulation.
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 3
Provider-1 License Upgrade Flow for an MDS Server with Internet Connection
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 4
License Upgrade of the Entire System prior to a Software Upgrade
In This Section
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 5
Upgrade Licenses
Upgrade Licenses
4. When upgrading a license you must perform different steps when an MDS has
Internet connectivity and when an MDS does not have Internet connectivity.
When an MDS machine has Internet connectivity:
Run the following command line tool on the MDS. On SecurePlatform, you must be
in expert mode.
• If the MDS is directly connected to the Internet run: pv1_license_upgrade
upgrade.
• If the MDS is connected to the Internet via a proxy run
pv1_license_upgrade upgrade -y <proxy:port> -w <user_name:pwd>.
The proxy port number is optional. Username and password (if any) are
intended for the proxy machine.
This step performs the following:
• Collects all the licenses that exist on the MDS machine.
• Verifies that all licenses can be upgraded, both for MDS and CMAs.
• Fetches updated licenses from the User Center.
• Builds a temporary cache file containing the NGX R62 licenses.
• Installs upgraded licenses for the MDS and CMAs.
When an MDS machine does not have Internet connectivity:
1. On the offline MDS, run the following command line tool:
pv1_license_upgrade export -z <package_file>
On SecurePlatform, run the command in expert mode.
The export command packs all licenses on the machine, for all CMAs and the
MDS into a single package file.
2. Copy the package file (containing the licenses) from the offline MDS to the
online machine. The online machine does not need to be a Check
Point-installed machine.
3. Copy the license_upgrade tool to the online machine and perform one of the
following:
• Run the license_upgrade line tool on the online machine:
If the online machine is directly connected to the User Center, run:
license_upgrade upgrade -i <input_file> -c <cache_file>
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 6
Upgrade Licenses
If the online machine is connected to the User Center via a proxy, run:
license_upgrade upgrade -y <proxy:port> -w <user_name:pwd> -i
<input_file> -c <cache_file>
Where <input_file> is the package file that is the result of the export
operation.
• Run the license_upgrade tool on the online machine (wizard mode):
- Press [O] to run the upgrade operation in offline mode.
- Enter the name of the exported file with the location of the package file
that is the result of the export operation.
- Enter the name of the file that will be created with all the upgraded
licenses (cache file name).
- Press [Y] when asked "Is this machine connected to the Internet?".
- Press [Y] if you are connected to the internet via a proxy and supply the
proxy IP port and username password.
- Press [N] if you are not connected via proxy and continue with the
upgrade.
- Enter the username and password of your User Center Account.
This step fetches new licenses from the User Center and puts them in a cache
file.
4. Copy the cache file (with the new licenses) back to the offline MDS machine.
5. Start the MDS in the root shell by running
mdsenv
mdsstart
6. Run the following command line on the offline MDS:
pv1_license_upgrade import -c <cache_file>
Where <cache_file> is the file that is the result of the upgrade operation
performed on the online machine.
As a result, the new CMA and MDS licenses are imported to the MDS.
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 7
After Completing the License Upgrade Process
Table 2
Table 3
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 8
After Completing the License Upgrade Process
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 9
License Upgrade for a Single CMA
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 10
Upgrade Licenses
Upgrade Licenses
3. When upgrading a license you must perform different steps when an MDS has
Internet connectivity and when an MDS does not have Internet connectivity.
When an MDS machine has Internet connectivity:
Perform one of the following:
• Run the following command at the MDS:
- If the MDS machine is directly connected to the Internet run:
license_upgrade upgrade.
- If the MDS machine is connected to the Internet via a proxy run:
license_upgrade upgrade -y <proxy:port> -w <user_name:pwd>.
The proxy port number is optional. Username and password (if any) are
intended for the proxy machine.
• Run the license_upgrade tool at the online machine (wizard mode):
- Press [U] to perform a license upgrade.
- Press [Y] when asked "Is this machine connected to the Internet?".
- Press [Y] if you are connected to the internet via a proxy and supply the proxy
IP port and username password.
- Press [N] if you are not connected via proxy and continue with the upgrade.
- Enter the user and password of your User Center Account.
This step performs the following:
• Collects all the licenses that exist on the CMA.
• Fetches updated licenses from the User Center.
• Installs an upgraded license for the CMA, and saves upgraded CMA
Repository licenses on the CMA.
When an MDS machine does not have Internet connectivity:
1. Copy the licenses from this machine to a file using one of the following
methods.
On SecurePlatform, run the command in expert mode and perform one of the
following:
• Run the following command line tool at the offline target machine:
license_upgrade export -z <package_file>.
• From the menu of options select:
- Press [U] to run the upgrade operation.
- Press [N] to specify that you don't have an internet connection.
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 11
Upgrade Licenses
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 12
After Completing the License Upgrade Process
Provider-1 NGX R61 License Upgrade Guide. Last Update — August 2, 2006 13